Free Stuff

Searching Hex Dumps – search terms and regular expressions

If you need to search a memory dump for SMS messages (or anything else for that matter), you may just pick up some tips from this page which aims to provide sample regular expressions and search terms for phone examiners.

Handset Imaging Table

This table lists those handsets which Control-F has successfully been able to image using the techniques described in our white paper.  We will update the list as we continue our research.  Please do contact us at info@controlf.net if you have any information to add to this list.

‘The Iceberg Presentation’

In this presentation, Kevin Mansell suggests that the forensic examinations of electronic devices such as mobile phones are akin to icebergs.  Find out more.

White Paper On Handset Imaging

Kevin Mansell collaborated with Royal Military Police’s digital forensics unit in Portsmouth to publish a white paper for the F3 Annual Conference 11-13 November 2008.  Titled  ‘Recovering Deleted Data from FAT Partitions Within Mobile Phone Handsets Using Traditional Imaging’ the paper explores how deleted and unallocated data can quickly and easily be retrieved from the internal memory of certain handsets using easily accessible data cables and computer forensic imaging tools. Download the white paper.

Watch a Presentation from Mobile Forensics World 2008

Control-F Managing Director Kevin Mansell delivered two well attended presentations at the inaugural Mobile Forensics World 2008 (MFW08) conference in Chicago last year.  Kevin gave examples of excellent evidence which can be retrieved from mobile phones, but which could easily be missed.  You can watch a video of the presentation here.